Service function chain optimization using live testing

ABSTRACT

Aspects of the disclosed technology address the problems of manually identifying and optimizing service chain (SC) performance bottlenecks by providing solutions for automatically identifying and tuning various SC parameters. In some aspects, a SC optimization process of the disclosed technology includes the replication or cloning of a SC for which traffic flow is to be optimized. Traffic flows for the production chain can then be simulated over one or more SC clones to identify and tune individual system parameters, for example, to determine if the simulated changes produce a positive, negative, or neutral change in flow performance. Systems and machine-readable media are also provided.

CROSS-REFERENCE TO RELATED APPLICATION

This application is a Continuation of, and claims priority to, U.S.Non-Provisional patent application Ser. No. 15/656,607, filed Jul. 21,2017, the content of which is incorporated herein by reference in itsentirety.

BACKGROUND 1. Technical Field

The subject technology relates to the optimization of flows over servicechains in a virtual network environment and in particular, to methodsfor cloning service chains and modifying various service chainparameters to determine optimal service chain configuration settings.

2. Introduction

Network Function Virtualization (NFV) technology, in combination withSoftware Defined Networking (SDN), promises to help transform today'scarrier networks. It will transform how they are deployed and managed,and the way services are delivered. Some ultimate goals are to enableservice providers to reduce costs, increase business agility, andaccelerate the time to market of new services.

The utilization of NFV and SDN technologies allows the decoupling ofnetwork functions from underlying hardware so they run as softwareimages or logical modules on commercial off-the-shelf and purpose-builthardware. NFV does so by using virtualization technologies (computers,networks, and storage media) to virtualize network functions. Theobjective is to reduce the dependence on physical devices by allocatingand using physical and virtual resources only when and where needed.With such approaches, service providers can reduce overall costs byshifting components to a common physical infrastructure while optimizingits use, allowing them to respond more dynamically to changing marketdemands by deploying new applications and services as needed. Thevirtualization of network functions accelerates the time to market fornew services by allowing for more automated and streamlined approachesto service delivery.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to describe the manner in which the above-recited and otheradvantages and features of the disclosure can be obtained, a moreparticular description of the principles briefly described above will berendered by reference to specific embodiments thereof which areillustrated in the appended drawings. Understanding that these drawingsdepict only example aspects of the disclosure and are not therefore tobe considered to be limiting of its scope, the principles herein aredescribed and explained with additional specificity and detail throughthe use of the accompanying drawings in which:

FIG. 1 illustrates an example network environment in which some aspectsof the technology can be implemented.

FIGS. 2A and 2B conceptually illustrate examples of service chaincloning and tuning, according to some aspects of the technology.

FIG. 3 illustrates steps of an example process for cloning and mutatingvarious configurable parameters of a production service chain, accordingto some aspects of the technology.

FIG. 4 illustrates an example network device on which some aspects ofthe technology can be implemented.

DETAILED DESCRIPTION

The detailed description set forth below is intended as a description ofvarious configurations of the subject technology and is not intended torepresent the only configurations in which the subject technology can bepracticed. The appended drawings are incorporated herein and constitutea part of the detailed description. The detailed description includesspecific details for the purpose of providing a more thoroughunderstanding of the subject technology. However, it will be clear andapparent that the subject technology is not limited to the specificdetails set forth herein and may be practiced without these details. Insome instances, structures and components are shown in block diagramform in order to avoid obscuring the concepts of the subject technology.

Overview:

With the proliferation of network function virtualization (NFV)technologies, many network functionalities that were previouslyperformed by hardware devices are now routinely implemented by virtualcomponents. Some networks implement ordered chains of virtual componentsin what is known as network service chaining (SC) or service functionchaining (SFC) to create ordered sequences of connected networkservices, e.g., firewalls, network address translation [NAT], intrusionprotection, etc. This capability can be used by network operators to setup suites or catalogs of connected services that enable the use of asingle network connection for many services with differentcharacteristics.

One advantage of service chaining is to automate the way virtual networkconnections can be set up to handle traffic flows for connectedservices. For example, an SDN controller could take a chain of servicesand apply them to different traffic flows depending on the source,destination or type of traffic. The SFC capability automates whatconventional network administrators do when they connect up a series ofphysical devices to process incoming and out coming network traffic,which may require a number of manual steps.

Due to trends in increasing network virtualization and abstraction, forexample, with virtual machines and container networking, it has becomeincreasingly difficult to diagnose and optimize traffic flow problems.Conventionally, traffic flow optimization in SFC environments is anarduous process that involves a time consuming manual trial-and-errorstyle effort to tune individual system parameters, and requirescross-domain knowledge to predict how changes may impact flowperformance.

Description

Aspects of the disclosed technology address the problems of manuallyidentifying and optimizing SFC performance bottlenecks by providingsolutions for automatically identifying and tuning SFC componentparameters. In some aspects, an SFC optimization solution of thedisclosed technology includes the replication or cloning of a selectedSFC (i.e., a “production SFC” or “production chain”) for which trafficflow is to be optimized. Traffic flows for the production chain can thenbe simulated over one or more SFC clones to identify and tune individualsystem parameters, for example, to determine if the simulated changesproduce a positive, negative, or neutral change in flow performance.Simulated SFC configurations that are determined to positively impacttraffic flows can be automatically pushed to the various productionchain devices, for example, by automatically updating data-pathparameters of the chain's containers, virtual machines, and/or virtualswitches or other routing devices (e.g., “vswitches”), etc.Alternatively, in some aspects, traffic flows for the production chainmay be redirected over the simulated SFC, effectively making it the newproduction chain.

As used herein, a service chain “device” can include physical and/orvirtual devices. For example, the data-path of a service chain caninclude a mix of physical and virtual devices that are associated with aparticular network operation or service function. Additionally, servicechain or service function path “parameters” can include any configurableaspect of service chain and/or device operation. For example, a servicechain parameter can relate to a particular function type, softwareversion, protocol, or any other aspect of device operation.

As discussed in further detail below, a method of the disclosedtechnology can include steps for measuring a first set of performancemetrics for a traffic flow directed over a production service chain(SC), where the production SC includes one or more physical and/orvirtual devices, cloning the production SC to produce a cloned SC, wherethe cloned SC includes at least one configurable parameter or devicethat is different from the production SC, and measuring a second set ofperformance metrics for a second traffic flow directed over the clonedSC. In some aspects, the method can further include steps foridentifying at least one configuration change for the production SC thatis likely to improve flow performance for the traffic flow directed overthe production SC, e.g., based on the first set of performance metricsand the second set of performance metrics, and automatically tuning theproduction SC to implement the configuration change.

FIG. 1 illustrates a diagram of an example network environment 100 inwhich various network function virtualization (NFV) devices can beimplemented to form a service chain (SC). Fabric 112 can represent theunderlay (i.e., the physical network) of environment 100. Fabric 112includes spine switches 1-N (102 _(A-N)) (collectively “102”) and leafswitches 1-N (104 _(A-N)) (collectively “104”). Leaf switches 104 canreside at the edge of fabric 112, and can represent the physical networkedges. Leaf switches 104 can be, for example, top-of-rack (“ToR”)switches, aggregation switches, gateways, ingress and/or egressswitches, provider edge devices, and/or any other type of routing orswitching device.

Leaf switches 104 can be responsible for routing and/or bridging tenantor endpoint packets and applying network policies. Spine 102 can performswitching and routing within fabric 112. Thus, network connectivity infabric 112 can flow from spine switches 102 to leaf switches 104, andvice versa.

Leaf switches 104 can include servers 1-4 (106 _(A-D)) (collectively“106”), hypervisors 1-3 (108 _(A)-108 _(C)) (collectively “108”),virtual machines (VMs) 1-4 (110 _(A)-110 _(D)) (collectively “110”). Forexample, leaf switches 104 can encapsulate and decapsulate packets toand from servers 106 in order to enable communications throughoutenvironment 100. Leaf switches 104 can also connect othernetwork-capable device(s) or network(s), such as a firewall, a database,a server, etc., to the fabric 112. Leaf switches 104 can also provideany other servers, resources, endpoints, external networks, VMs,services, tenants, or workloads with access to fabric 112.

Servers 106 can include hardware and software necessary to implement anetwork function virtualization (NFV) platform of the subjecttechnology. An NFV platform may be implemented using hypervisors 108 tosupport various virtual network devices, for example, that areinstantiated as one or more of VMs 110, and/or one or more networkcontainers (not illustrated).

As discussed in further detail below with respect to FIGS. 2A and 2B,service chains that include various virtual network device types (andconfigurations) may be formed through, connection to a virtual switch,e.g., a ‘vswitch.’

FIG. 2A conceptually illustrates an example of service chain cloning,according to some aspects of the technology. In particular, FIG. 2Adepicts a production service chain (or “production SC”) 201, and twoclones of the production SC, i.e., a first cloned service chain (or“first cloned SC”) 203, and a second cloned service chain (or “secondcloned SC”) 205.

Production SC 201 is configured to provide and/or receive traffic from aconnected host 200A. Flows traversing production SC 201 are providedsequentially to each device or service in the chain. As illustrated inthe example, traffic flows traversing production SC 201 must flowthrough a router (e.g., QoS Router 204A), an inline intrusion protectionsystem (IPS) 206A, load balancer 208A, and a server (e.g., HTTP Server210A). Each of the devices (204A, 206A, 208A, and 210A) iscommunicatively coupled via virtual switch 212A, for example, that isimplemented using an Open vSwitch with the Data Plane Development Kit(OVS-DPDK).

Production SC 201 can include a greater (or fewer) number of devices,and/or devices of a different function/type, without departing from thetechnology. Additionally, as discussed in further detail below, varioussettings for each device, as well as any data-path parameters for theservice chain, can vary depending on the desired implementation.

In operation, production SC 201 represents a functional service chain,for example, that is implemented in a virtual network environment, suchas a network data center (DC). In some implementations, the productionSC is cloned (duplicated), for example, in by instantiating similar (oridentical) devices that are organized and configured in substantiallythe same way. By duplicating the production SC, changes can be made tocertain device and/or data-path parameters in order to measure theoverall effect on traffic flow performance for the cloned chain that isdue to the parameter changes. As such, multiple different SCconfigurations can be used to test optimal data-path parameters, withoutthe need to interfere with flows being processed by the production SC.Configuration changes determined to increase flow performance in acloned SC can either be implemented in the original production servicechain, or traffic flows may be redirected over a newly instantiated(cloned) SC, effectively designating it as the new “production SC.”

Further to the example illustrated in FIG. 2A, production SC 201 iscloned to produce first cloned SC 203, and second cloned SC 205, whichare coupled to host devices 200B and 200C, respectively. First cloned SC203, and second cloned SC 205 represent service chains that aresubstantially similar to production chain 201, but with specificconfiguration changes. For example, first cloned SC 203 contains deviceswith associated device configurations that are similar to production SC201. That is, first cloned SC 203 contains a QoS Router 204B, Inline IPS206B, load balancer 208B, and server 210B. However, first cloned SC 203is implemented using a different virtual switch, i.e., using vectorpacket processing (VPP), rather than OVS-DPDK.

Similarly, second cloned SC 205 contains a series of similar devices(e.g., 204C, 206C, and 208C), and a virtual switch 212C that is similarto production SC 201 (OVS-DPDK). However, second cloned SC 205 includesa HTTP Server 216 that uses a different compression protocol (i.e.,“deflate”), than that of production SC 201.

With first cloned SC 203, and second cloned SC 205 each representingconfiguration changes with respect to production SC 201, traffic flowsover the cloned SCs (203, 205) can be measured to determine if theconfiguration changes provide any performance benefits. To measure theperformance of the cloned SCs, traffic flows for production SC 201 canbe duplicated and routed over each of the cloned SCs (203, 205). Variousmetrics for the traffic flows are collected to determine what impact thechanges had on flow performance. By way of example, end-to-end times foreach packet to traverse its respective SC can be measured, and/orprocessing durations at each device in the SC can be determined.

If modification of the virtual switch (e.g., from OVS-DPDK 212A to VPPin virtual switch 214) results in a decreased latency between devices,it may be determined that changes to virtual switch 212A can improvetraffic flow performance in production SC 201. Similarly, ifconfiguration changes in HTTP Server 216 (e.g., to implement Deflatecompression in server 216) result in latency reductions, it may bedetermined that modifications of the compression scheme implemented inHTTP Server 210A are likely to improve flow performance in production SC201. In some implementations, mutated parameters that are determined toimprove flow characteristics in a cloned SC can be used to provideautomatic configuration updates to the production SC.

By way of further example, the virtual switch settings for first clonedSC 203, and HTTP Server compression settings for second cloned SC 205can be saved and/or automatically pushed as network changes (e.g., by anetwork controller) to update production SC 201. In some approaches,production SC cloning and configuration mutation can be performed toautomatically determine new configuration settings for the productionSC. Depending on implementation, parameter tuning for a production SCcan be performed periodically, or in response to one or morepredetermined events, such as updates/changes made in the networkenvironment.

FIG. 2B conceptually illustrates another example of a production SCmutation that can be implemented using the disclosed technology. In theexample of FIG. 2B, production SC 207 is identically duplicated (with noparameter changes) as cloned SC 209, and duplicated (with changes) ascloned SC 211. In such implementations, true A/B testing (i.e.,“split-run testing”) can be performed, for example, by observing howtraffic flows behave in a cloned SC that is functionally identical tothe selected production SC.

In practice, production SC 207 and cloned SC 209 contain substantiallyidentical devices and configuration parameters (e.g., QoS Routers 218,Inline IPS 220, Load Balancer 222, and HTTP Server 224, connected byvSwitch 226). However, SC 211 contains HTTP server 228, which implementsa compression scheme (Deflate) that is different from that of cloned SC209 (GZIP). Using an identical copy of production SC 207 (i.e., clonedSC 209), and a modified version (i.e., cloned SC 211), A/B testing canbe performed, for example, by determining how identical traffic flowperformance may differ between clones 209, and 211.

Similar to the example of FIG. 2A, configuration changes that aredetermined to improve traffic flow performance on cloned SC 211 can beautomatically pushed to production SC 207, for example, by a networkcontroller for other configuration device. In some instances, newnetwork settings may be first provided to a user (e.g., a systemadministrator) for approval, before being pushed out to the network. Asunderstood by those of skill in the art, parameter changes to aproduction SC can be made on a device-by-device basis, for example,using an application programming interface (API) of the respectivedevice.

Although the examples, illustrated in FIGS. 2A and 2B only depict twoduplications of a production SC, it is understood that any number ofclones can be made. Additionally, each cloned SC can include multipleconfiguration changes, without departing from the scope of thetechnology. Accordingly, through the systematic SC duplication andparameter mutation, optimal configuration settings can be determined fora selected production SC. As discussed in further detail below, optimalconfiguration parameters for a given service chain can be stored to adatabase, for example, and used to initialize (or inform) configurationchanges for similarly implemented SCs in other networking contexts,and/or for similar traffic flows with similar profiles.

In some aspects, parameter tuning for a selected production SC can beautomatically performed on an ongoing basis, such as at predeterminedtime intervals. In other aspects, production SC tuning may be performedin response to one or more network events, such as an update orconfiguration change made to one or more devices, theinstantiation/removal of a device from the network fabric, and/orchanges in traffic flow characteristics, e.g., changes in trafficdestination, type, bandwidth usage, or quality-of-service requirements.

FIG. 3 illustrates steps of an example process 300 for implementing anautomatic production service chain parameter tuning solution. Process300 begins with step 302, in which a first set of performance metricsare measured for traffic directed over a production service chain. Asdiscussed above, the production service chain (SC) can containessentially any type/arrangement of virtual network devices, forexample, such as illustrated in FIGS. 2A and 2B, discussed above.

The type of performance metric/s measured for traffic flows over theproduction SC may vary with implementation. For example, end-to-endtimes for one or more packets traversing the SC can be measured.Additionally, processing times and/or throughput for one or more devicesin the chain, and/or packet latency for transmissions between devicesmay also be measured.

It is understood that various speed and quality metrics for theproduction SC can be determined to assess performance. As discussed ingreater detail below, these performance metrics can be used to determineif modified parameters for one or more cloned SC provide traffic flowperformance enhancements.

In step 304, the production SC is cloned to produce a (first) cloned SC,for example, in which one or more parameters have been modified. Anon-exhaustive summary of example parameters that can be modified isprovided in further detail below; however, one of skill in the art willrecognize that essentially any change in configuration or arrangement,to one or more of the devices in the cloned SC, can count as a parameterchange or SC mutation.

In practice, traffic flows that traverse the production SC areduplicated, for example at a head-end node, and provided to the clonedSC. In this manner, the cloned SC is subject to the same traffic load asthe production SC.

Subsequently, in step 306, a second set of performance metrics ismeasured for traffic directed over the cloned SC. Although the secondset of performance metrics can include essentially any measurablequality of traffic throughput/transfer, in some aspect the second set ofperformance metrics includes essentially the same measurements as weredetermined in the first set (step 302), for comparison purposes.

The second set of performance metrics are compared to the first set ofperformance metrics to determine if parameter changes in the cloned SCresulted in an improvement for the processed traffic flow. In instanceswhere the second set of performance metrics represent potentialimprovements over the first set of performance metrics (i.e., reducedend-to-end times, reduced processing time for one or more device in thecloned SC, and/or reduced packet transfer delays between devices), itmay be inferred that similar changes would produce similar improvementsin traffic flows over the production SC.

Configuration changes determined to likely improve flow performance canbe saved, for example, to a database that correlates SC data-pathsettings with various network and traffic-flow characteristics. In someapproaches, a database may be configured to correlate sets of trafficcharacteristics (e.g., a traffic profile) with service chainconfiguration characteristics (e.g., a service chain profile). Based oncorresponding traffic profiles and service chain profiles, the databasemay be used to identify candidate parameter mutations to be tested inone or more subsequent cloned SC instantiations, for example, in thesame (or a different) network environment.

In step 308, at least one configuration change that is determined tolikely improve traffic flow performance for the production SC isidentified. The identified configuration change/s can be automaticallypushed, so that the configuration of the production SC is automaticallytuned for optimal traffic flow performance. Alternatively, one or moreconfiguration update recommendations may be provided to a user (e.g., anetwork administrator) to verify that the network changes should beimplemented before the new configuration is pushed out to the network.As discussed above, process 300 can be performed for a selectedproduction SC on a periodic basis, or in response to certain detectedchanges in the network fabric.

By way of non-limiting example, production SC tuning can be performed inresponse to network changes, such as when: a new service function ordevice is added to (or removed from) an existing chain, a service chainis newly added to (or removed from) a NFV platform, a service functionchain is moved to a new data center or underlying platform, asignificantly new traffic profile is added to the network, and/or anexisting traffic profile changes significantly. Parameter tuning canalso be performed in response to an exceeded resource threshold for oneor more devices in the service chain. By way of example, SC tuning canbe performed if CPU usage exceeds a predetermined amount (e.g., 75% oftotal CPU capacity), if memory utilization exceeds a predeterminedthreshold (e.g., 80% of total memory capacity), of if a monitoredthreshold is reached (e.g., more than three packets sitting in aningress queue), etc. Additionally, SC tuning can be performed inresponse to determinations that various performance thresholds have beenmet, or exceeded. For example, tuning can be performed in response to adetermination that an end-to-end transaction time has exceeded apredetermined threshold (e.g., 3 ms), or that processing time for aparticular type of function in the chain has exceeded a predeterminedduration (e.g., a DPI function that exceeds 6 ms), etc.

In some aspects, parameter tuning of cloned SCs can be performed using amachine-learning (ML) approach. For example, one or more ML algorithmscan be used to monitor traffic flow performance over production andcloned SCs, and to update the configurable parameters of the cloned SCsto identify configuration combinations that result in improvedperformance. As understood by those of skill in the art, virtually anynumber of production/cloned SCs may be monitored using a ML approach,for example, such that hundreds or thousands of active cloned SCs aremonitored at any time, each with different parameters set by the MLalgorithm.

As understood by those of skill in the art, virtually any parameterrelating to a device or entire service chain (e.g., data path) may bealtered, for example, in one or more SC clones. For example, parametersrelating to RAM, CPU, or storage allocations to VM endpoints can bealtered between various production SCs and SC clones. In some instances,providing additional resources to VM endpoints can increase performance,but often leads to diminishing returns as the bottleneck moves fartherdown the list; additionally, due to the finite nature of computeresources, increasing VM allocations may cause contention with otherinstances on the host.

In some aspects, parameters relating to RAM, CPU, or storage allocationsto NFV devices can be altered between various production SCs and SCclones. Such parameters can affect allocation of resources to one ormore virtualized device, such as a virtual router. As with VMallocations, increased NFV resource allocations can provide diminishingreturns, especially in cases where throughput for a device is restrictedby software license.

In some aspects, parameters corresponding to configurations formulti-queue support for one or more virtual network interface cards(NICs) can be altered between various production SCs and SC clones. Forinstance, a VM's virtual NIC may only have a single receive buffer.Adding multi-queue support can increase receive capacity in cases whereone or more vCPUs are idle enough to service additional receive queues.

In some aspects, parameters relating to test access point (TAP)interface transmit queue lengths can be altered between production SCsand SC clones. For example, in some kernel-based virtual machines(KVMs)/OpenStack implementations, the TAP interface provides a virtuallink from the host's kernel to the VM's virtual NIC. The default queuelength in some deployments is relatively low by modern network standards(e.g., 500 packets). Increasing the queue length can increase theprocessing capacity of the link. However, careful tuning can be requiredas a queue size that is too large may increase latency, which is aconcern for sensitive applications such as voice and video.

In some aspects, parameter tuning can be used to implement either LinuxvEth pairs or OVS patch ports. By default, many deployments using OpenvSwitch (OVS) to provide link layer connectivity to VMs (particularly inOpenStack environments) utilize Linux vEth pairs to deliver packetsbetween OVS bridges. However, such implementations can cause performancebottlenecks as it involves switching packets in and out of user-space.In some implementations, a more efficient solution can be to replacevEth pairs with OVS patch ports to keep all packets processed within thekernel. Without a clone of the in-service data path, all networking onthe host must be brought down to test this change, thus impactingtraffic.

In some aspects, parameter tuning can be used to alter resourcesavailable to host hardware. Increasing resources (e.g., CPU, RAM, etc.),either by quantity or speed/efficiency, on host hardware typicallyimproves performance. Parameter tuning can involve hosting all (orportions of the service chain functions) on the same or differenthardware.

In some aspects, parameter tuning can be used to affectupgrades/downgrades of a host kernel version. Upgrading or downgradingthe kernel of the host can result in performance differences, forexample, to various guests (virtual services) running on them, since thehost's kernel is still responsible for delivering packets to/from theguests.

In some aspects, one or more parameters can be manipulated to affectphysical link aggregation between various production SCs and SC clones.For example, changes to link aggregation algorithms, such as LinkAggregation Control Protocol (LACP), can affect performance, dependingon how well traffic is load balanced across physical links. Optimal loadbalancing can be highly context specific and therefore the loadbalancing algorithm depends heavily on the type of traffic to beprocessed by the environment. For example, an environment that deals inmany small Transmission Control Protocol (TCP) and/or User DatagramProtocol (UDP) connections between similar endpoints could most benefitfrom L4-based algorithms, e.g., since the source and destinationInternet Protocol (IP) addresses will often be the same for every flow.

In some aspects, one or more parameters can be manipulated to affectbuffer capacity and/or processing capability of one or more networkinterface cards (NICs). Depending on implementation, parameter tuningcan be used to affect a size of one or more packet buffers (e.g.,similar to TAP interface transmit queue length tuning), and/or toupgrade a driver for more efficient processing.

In some aspects, one or more parameters can be manipulated to affect atype of packet forwarding technology that is implemented. In cloudenvironments, there are many options for packet forwarding technologiesand each have advantages and disadvantages. For example, somedeployments may have guests using the host's kernel as an intermediarybetween the virtual NIC and a physical NIC of the host to give themaccess to the physical network. This can often be a performancebottleneck depending on the speed and available resources of the host.Newer technologies such as vector packet processing (VPP), which canalso be built on top of Data Plane Development Kit (DPDK) to providemore direct access to hardware, can help alleviate these bottlenecks andallow for better performance for packets that didn't enter or leave aparticular node.

It is understood that the foregoing examples of tunable deviceparameters are not exhaustive, and that other service chain qualities orconfigurations can be modified without departing from the scope of thetechnology.

FIG. 4 illustrates an example network device 410 that can be used toimplement one or more service chains (SCs), as discussed above. Networkdevice 410 includes master central processing unit (CPU) 462, interfaces468, and a bus 415 e.g., a Peripheral Computer Interconnect (PCI) bus.CPU 462 can be configured to perform monitoring for one or more virtualnetwork functions under the control of software including an operatingsystem and any appropriate applications software. CPU 462 can includeone or more processors 463, such as processors from the Intel, ARM,and/or Motorola family of microprocessors or the MIPS family ofmicroprocessors. In an alternative embodiment, processor 463 isspecially designed hardware for controlling the operations of networkdevice 410. In a specific embodiment, a memory 461 (such as non-volatileRAM and/or ROM) also forms part of CPU 462. However, there are manydifferent ways in which memory could be coupled to the system.

Interfaces 468 can be provided as interface cards (sometimes referred toas “network interface cards” (NICs) or “line cards”). Generally, theycontrol the sending and receiving of data packets over the network andsometimes support other peripherals used with device 410. Among theinterfaces that may be provided are Ethernet interfaces, frame relayinterfaces, cable interfaces, Digital Subscriber Line (DSL) interfaces,token ring interfaces, and the like. In addition, various veryhigh-speed interfaces can be provided such as fast token ringinterfaces, wireless interfaces, Ethernet interfaces, Gigabit Ethernetinterfaces, Asynchronous Transfer Mode (ATM) interfaces, High SpeedSerial Interfaces (HSSIs), Point of Sale (POS) interfaces, FiberDistributed Data Interface (FDDIs), and the like. Generally, theseinterfaces can include ports appropriate for communication with theappropriate media. In some cases, they may also include an independentprocessor and, in some instances, volatile RAM. The independentprocessors may control such communications intensive tasks as packetswitching, media control and management. By providing separateprocessors for the communications intensive tasks, these interfacesallow the master microprocessor 462 to efficiently perform routingcomputations, network diagnostics, security functions, etc.

Although the system shown in FIG. 4 is one specific network device ofthe present invention, it is by no means the only network devicearchitecture on which the present invention can be implemented. Forexample, an architecture having a single processor that handlescommunications as well as routing computations, etc. is often used.Further, other types of interfaces and media could also be used with therouter.

Regardless of the network device's configuration, it may employ one ormore non-transitory memories or memory modules (including memory 461)configured to store program instructions for general-purpose networkoperations and mechanisms necessary to implement one or more steps of aservice chain auto-tuning process of the subject technology.

For example, memory 461 can include a non-transitory computer-readablemedium that includes instructions for causing CPU 462 to executeoperations for measuring a first set of performance metrics for a firsttraffic flow directed over a production service chain (SC), wherein theproduction SC comprises one or more devices, and cloning the productionSC to produce a first cloned SC, wherein the first cloned SC comprisesat least one parameter or device that is different from the productionSC. In some aspects, the operations can further include steps formeasuring a second set of performance metrics for a second traffic flowdirected over the cloned SC, and based on the first set of performancemetrics and the second set of performance metrics, identifying at leastone configuration change for the production SC that is likely to improveflow performance for the first traffic flow directed over the productionSC.

It is understood that any specific order or hierarchy of steps in theprocesses disclosed is an illustration of exemplary approaches. Basedupon design preferences, it is understood that the specific order orhierarchy of steps in the processes may be rearranged, or that only aportion of the illustrated steps be performed. Some of the steps may beperformed simultaneously. For example, in certain circumstances,multitasking and parallel processing may be advantageous. Moreover, theseparation of various system components in the embodiments describedabove should not be understood as requiring such separation in allembodiments, and it should be understood that the described programcomponents and systems can generally be integrated together in a singlesoftware product or packaged into multiple software products.

The previous description is provided to enable any person skilled in theart to practice the various aspects described herein. Variousmodifications to these aspects will be readily apparent to those skilledin the art, and the generic principles defined herein may be applied toother aspects. Thus, the claims are not intended to be limited to theaspects shown herein, but are to be accorded the full scope consistentwith the language claims, wherein reference to an element in thesingular is not intended to mean “one and only one” unless specificallyso stated, but rather “one or more.”

A phrase such as an “aspect” does not imply that such aspect isessential to the subject technology or that such aspect applies to allconfigurations of the subject technology. A disclosure relating to anaspect may apply to all configurations, or one or more configurations. Aphrase such as an aspect may refer to one or more aspects and viceversa. A phrase such as a “configuration” does not imply that suchconfiguration is essential to the subject technology or that suchconfiguration applies to all configurations of the subject technology. Adisclosure relating to a configuration may apply to all configurations,or one or more configurations. A phrase such as a configuration mayrefer to one or more configurations and vice versa.

The word “exemplary” is used herein to mean “serving as an example orillustration.” Any aspect or design described herein as “exemplary” isnot necessarily to be construed as preferred or advantageous over otheraspects or designs.

1. A computer-implemented method comprising: implementing a productionservice chain (SC) with a plurality of devices, the production SC havinga first set of performance metrics for a first traffic flow directedover the production SC; cloning the production SC to produce a clonedSC, wherein the cloned SC comprises a cloned plurality of devicescorresponding to the plurality of devices, the cloned SC having a secondset of performance metrics for a second traffic flow directed over thecloned SC, wherein at least one of the devices of the cloned pluralityof devices has at least one parameter that is different from theplurality of devices; and based on the first set of performance metricsand the second set of performance metrics and in response to apredetermined event, applying the at least one parameter that isdifferent from the at least one of the devices of the cloned pluralityof devices to a respective one of the plurality of devices.
 2. Thecomputer-implemented method of claim 1, wherein the predetermined eventis a time interval.
 3. The computer-implemented method of claim 1,wherein the predetermined event is one or more network events.
 4. Thecomputer-implemented method of claim 1, wherein the first set and secondset of performances metrics measure, in the first and second trafficflows, a type.
 5. The computer-implemented method of claim 1, whereinthe first set and second set of performances metrics measure, in thefirst and second traffic flows, bandwidth usage.
 6. Thecomputer-implemented method of claim 1, wherein the first set and secondset of performances metrics are measured over a time interval.
 7. Thecomputer-implemented method of claim 1, further comprising: based on thefirst set of performance metrics and the second set of performancemetrics and in response to a second predetermined event, resetting theat least one parameter that is different from the at least one of thedevices of the plurality of devices is the first cloned SC to arespective one of the plurality of devices of the production SC.
 8. Asystem comprising: one or more processors; and a non-transitorycomputer-readable medium comprising instructions stored therein, whichwhen executed by the one or more processors, cause the one or moreprocessors to: implement a production service chain (SC) with aplurality of devices, the production SC having a first set ofperformance metrics for a first traffic flow directed over theproduction SC; clone the production SC to produce a cloned SC, whereinthe cloned SC comprises a cloned plurality of devices corresponding tothe plurality of devices, the cloned SC having a second set ofperformance metrics for a second traffic flow directed over the clonedSC, wherein at least one of the devices of the cloned plurality ofdevices has at least one parameter that is different from the pluralityof devices; and based on the first set of performance metrics and thesecond set of performance metrics and in response to a predeterminedevent, apply the at least one parameter that is different from the atleast one of the devices of the cloned plurality of devices to arespective one of the plurality of devices.
 9. The system of claim 8,wherein the predetermined event is a time interval.
 10. The system ofclaim 8, wherein the predetermined event is one or more network events.11. The system of claim 8, wherein the first set and second set ofperformances metrics measure, in the first and second traffic flows, atype.
 12. The system of claim 8, wherein the first set and second set ofperformances metrics measure, in the first and second traffic flows,bandwidth usage.
 13. The system of claim 8, wherein the first set andsecond set of performances metrics are measured over a time interval.14. The system of claim 8, further comprising instructions, which whenexecuted by the one or more processors, causes the one or moreprocessors to: based on the first set of performance metrics and thesecond set of performance metrics and in response to a secondpredetermined event, reset the at least one parameter that is differentfrom the at least one of the devices of the plurality of devices is thefirst cloned SC to a respective one of the plurality of devices of theproduction SC.
 15. A non-transitory computer-readable medium comprisinginstructions stored therein, which when executed by one or moreprocessors, cause the one or more processors to: implement a productionservice chain (SC) with a plurality of devices, the production SC havinga first set of performance metrics for a first traffic flow directedover the production SC; clone the production SC to produce a cloned SC,wherein the cloned SC comprises a cloned plurality of devicescorresponding to the plurality of devices, the cloned SC having a secondset of performance metrics for a second traffic flow directed over thecloned SC, wherein at least one of the devices of the cloned pluralityof devices has at least one parameter that is different from theplurality of devices; and based on the first set of performance metricsand the second set of performance metrics and in response to apredetermined event, apply the at least one parameter that is differentfrom the at least one of the devices of the cloned plurality of devicesto a respective one of the plurality of devices.
 16. The non-transitorycomputer-readable medium of claim 15, wherein the predetermined event isa time interval.
 17. The non-transitory computer-readable medium ofclaim 15, wherein the predetermined event is one or more network events.18. The non-transitory computer-readable medium of claim 15, wherein thefirst set and second set of performances metrics measure, in the firstand second traffic flows, a type.
 19. The non-transitorycomputer-readable medium of claim 15, wherein the first set and secondset of performances metrics measure, in the first and second trafficflows, bandwidth usage.
 20. The non-transitory computer-readable mediumof claim 15, wherein the first set and second set of performancesmetrics are measured over a time interval.